includedir /etc/krb5.conf.d/

[libdefaults]
  default_realm = {{ ipa_realm }}
  dns_lookup_realm = false
  dns_lookup_kdc = false
  rdns = false
  dns_canonicalize_hostname = false
  ticket_lifetime = 24h
  forwardable = true
  udp_preference_limit = 0
  default_ccache_name = FILE:/tmp/%u.ccache

[realms]
  {{ ipa_realm }} = {
    kdc = {{ ipa_server }}:88
    master_kdc = {{ ipa_server }}:88
    admin_server = {{ ipa_server }}:749
    kpasswd_server = {{ ipa_server }}:464
    default_domain = {{ ipa_realm | lower }}
    pkinit_anchors = FILE:/etc/ipa/ca.crt
    pkinit_pool = FILE:/etc/ipa/ca.crt
  }

[domain_realm]
 {{ env_short }}.fedoraproject.org = {{ ipa_realm }}
 .{{ env_short }}.fedoraproject.org = {{ ipa_realm }}
 {{ env_short }}.{{ datacenter }}.fedoraproject.org = {{ ipa_realm }}
 .{{ env_short }}.{{ datacenter }}.fedoraproject.org = {{ ipa_realm }}
 fasjson{{ env_suffix }}.fedoraproject.org = {{ ipa_realm }}
